Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
halil dalabasmaz vulnerabilities and exploits
(subscribe to this query)
4.3
CVSSv2
CVE-2014-8954
Multiple cross-site scripting (XSS) vulnerabilities in phpSound 1.0.5 allow remote malicious users to inject arbitrary web script or HTML via the (1) Title or (2) Description fields in a playlist or the (3) filter parameter in an explore action to index.php.
Codecanyon Phpsound 1.0.5
1 EDB exploit
7.5
CVSSv2
CVE-2014-8997
Unrestricted file upload vulnerability in the Photo functionality in DigitalVidhya Digi Online Examination System 2.0 allows remote malicious users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in as...
Digitalvidhya Digi Online Examination System 2.0
1 EDB exploit
4.3
CVSSv2
CVE-2015-2198
Multiple cross-site scripting (XSS) vulnerabilities in edit_prefs.php in Beehive Forum 1.4.4 allow remote malicious users to inject arbitrary web script or HTML via the (1) homepage_url, (2) pic_url, or (3) avatar_url parameter, which are not properly handled in an error message.
Beehive Forum Beehive Forum 1.4.4
1 EDB exploit
4.3
CVSSv2
CVE-2014-9516
Cross-site scripting (XSS) vulnerability in Social Microblogging PRO 1.5 allows remote malicious users to inject arbitrary web script or HTML via the PATH_INFO to the default URI, related to the "Web Site" input in the Profile section.
Social Microblogging Pro Project Social Microblogging Pro 1.5
1 EDB exploit
4.3
CVSSv2
CVE-2014-100013
Multiple cross-site scripting (XSS) vulnerabilities in clientResponse 4.1 allow remote malicious users to inject arbitrary web script or HTML via the (1) Subject or (2) Message field.
Clientresponse Project Clientresponse 4.1
1 EDB exploit
4
CVSSv2
CVE-2014-9179
Cross-site scripting (XSS) vulnerability in the SupportEzzy Ticket System plugin 1.2.5 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the "URL (optional)" field in a new ticket.
Supportezzy Ticket System Project Supportezzy Ticket System 1.2.5
1 EDB exploit
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
SSTI
CVE-2024-35863
CVE-2024-35910
man-in-the-middle
CVE-2024-35912
CVE-2024-25742
LFI
CVE-2024-32002
CVE-2024-22120
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started